75 matches found
CVE-2022-42045
CVE-2022-42045 概述 我们发现 Zemana amsdk.sys 内核模式驱动程序（Zemana 反恶意软件 SDK 的一部分）中存在任意代码注入漏洞。该漏洞允许将任意代码注入到驱动程序代码段之一，然后以内核模式权限执行它（从管理员到内核模式的本地权限提升）。例如，此漏洞可用于禁用驱动程序签名强制，然后安装未签名的内核模式驱动程序。 详细信息 易受攻击的函数位于 amsdk.sys 的 .text 段起始偏移 0xBF60 处。该函数调用另一个位于偏移 0xD664 处的函数。偏移 0xD664 处的函数接收 4 个参数： 1. 目标地址：.hook 段中具有 RWX...
CVE-2019-6440
CVE-2019-6440： 测试过的产品： Zemana 反恶意软件 v.2.74.2.150 和 Zemana 反日志工具 v.2.74.204.150。 自 v.2.74.2.664 起已修复 关于漏洞： 该漏洞允许攻击者在目标机器上获取 SYSTEM 权限，无需用户交互 。 前提条件： 1. 攻击者必须能够拦截并篡改发往 URL "POST /api/client/settings/" 的 POST 请求内容。 2. 无需对目标 PC 进行物理访问。 详细信息： 测试过的产品使用明文 HTTP 接收更新，因此攻击者可以轻松地将版本号和相应 URL 改为任意值。 让我们将更新...
CVE-2021-31728
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...
CVE-2022-42045
Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28...
CVE-2024-2180
Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...
EUVD-2018-7369
Malware in sbrugna...
EUVD-2024-27164
Malicious code in bioql PyPI...
EUVD-2022-45136
Malicious code in bioql PyPI...
EUVD-2024-27142
Malicious code in bioql PyPI...
EUVD-2024-17578
Malicious code in bioql PyPI...
Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware
The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a Bring Your Own Vulnerable Driver BYOVD attack aimed at disarming security solutions installed on compromised hosts. The vulnerable driver ...
VulnCheck KEV: CVE-2022-42045
Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28...
VulnCheck KEV: CVE-2021-31728
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...
CVE-2024-2204
Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...
CVE-2019-6440
Zemana AntiMalware before 3.0.658 Beta mishandles update logic...
PT-2025-17846 · Undefined · Undefined
We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...
The vulnerability of the IOCTL Handler components in the zam64.sys and zamguard64.sys drivers of the Zemana AntiLogger software allows a hacker to induce a service failure.
The vulnerability of the IOCTL Handler component of the zam64.sys and zamguard64.sys drivers in the Zemana AntiLogger software is related to improper checking of ownership of critical resources. Exploiting this vulnerability allows an attacker to cause a service failure by executing the IOCTL...
VulnCheck KEV: CVE-2024-1853
Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...
